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REMARKS/ARGUMENTS 

Prior to entry of this amendment, claims 1-11, 13-21, 23-31 and 33-36 were 
pending in this application. Claim 1 has been amended, new claims 39-43 have been added, and 
no claims have been canceled herein. Therefore, claims 1-11, 13-21, 23-31, 33-36 and 39-43 are 
now pending in this application. Applicants respectfully request reconsideration of this 
application for at least the reasons presented below. 

35 U.S.C. § 101 Rejection 

The final Office Action previously rejected claims 1-11, 13-21, 23-31 and 33-36 
under 35 U.S.C. § 101 as being "directed to non-statutory subject matter." More specifically, the 
Office Action cites the Interim Guidelines for Examination of Patent Applications for Patent 
Subject Matter Eligibility (hereinafter "Guidelines") and argues that claim 1, upon which claims 
2-11, 13, and 34-36 depend, and claim 14, upon which claims 15-21 and 23 depend, do not 
provide a practical application, i.e., that they do not provide a "useful, concrete, and tangible 
result." The Advisory Action continued to assert that these claims are directed to non-statutory 
subject matter by not being limited to "a machine or manufacture." 

The applicants respectfully continue to maintain that, for at least the reasons 
argued previously, the claims are in fact directed to statutory subject matter and that the rejection 
is improper. However, for the sake of expediency in moving the claims toward allowance, an 
amendment has been made to claim 1 that is thought to provide additional reasons for 
withdrawal of the rejection. Namely, claim 1 has been amended to be directed to "a computer- 
implemented method," thus, it is submitted, limiting the claim to "a machine or manufacture," 
i.e., the computer. For at least this additional reason, claim 1 and its dependent claims 2-11, 13, 
and 34-36 are thought to overcome the reasons for rejection. Therefore, the applicants request 
withdrawal of the rejection. 
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Regarding claim 14 and its dependent claims, the undersign respectfully requests 
further clarification of this rejection. Specifically, the undersigned, with all due respect, cannot 
understand how "one or more processor readable storage devices" are considered to not be an 
article of manufacture and thus allowable subject matter. 

The applicants submit that claim 14, reciting in part "one or more processor 
readable storage devices," is clearly directed to an article of manufacture. As noted in the 
Guidelines: 

"A manufacture is 'the production of articles for use from raw or prepared 
materials by giving to these materials new forms, qualities, properties or 
combinations, whether by hand labor or by machinery.' Chakrabarty, 447 U.S. at 
308, 206 USPQ at 196-97 (quoting American Fruit Growers, Inc. v. Brogdex Co., 
283 U.S. 1, 11 (1931))." 

The one or more processor readable storage devices of claim 14 have "processor readable code 
embodied" thereon. That is, the devices comprise articles produced for use from raw or prepared 
materials by giving to these materials new forms, qualities, properties or combinations. 
Furthermore, as an article of manufacture, claim 14 and its dependent claims fall squarely within 
the realm of subject matter explicitly and clearly defined by the Guidelines, a long and thorough 
history of case law, and, not least of all, 35 U.S.C. §101. Therefore, the applicants respectfully 
request withdrawal of the rejection. 

35 U.S.C. §103 Rejection, Du in view of SiteMinder 

The Office Action has rejected claims 1-11, 13-21, 23-31 and 33-36 under 
35 U.S.C. § 103(a) as being unpatentable over U. S. Patent No. 6,041,306, issued March 21, 
2000, to Du et al. (hereinafter "Du") in view of Netegrity, Inc., "SiteMinder Policy Server 
Operations Guide", Version 4.0, published 1997 (hereinafter "SiteMinder"). The Applicants 
respectfully submit that the Office Action does not establish a prima facie case of obviousness in 
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rejecting these claims. Therefore, the Applicants request reconsideration and withdrawal of the 
rejection. 

In order to establish a prima facie case of obviousness, the Office Action must 
establish: 1) some suggestion or motivation, either in the references themselves or in the 
knowledge generally available to one of ordinary skill in the art, to modify the references or 
combine their teachings; 2) a reasonable expectation of success of such a modification or 
combination; and 3) a teaching or suggestion in the cited prior art of each claimed limitation. 
See MPEP § 706.02(j). However, as will be discussed below, the references cited by the Office 
Action do not teach or suggest each claimed limitation. For example, neither reference, alone or 
in combination, teaches or suggests associating workflows with one or more groups in an 
identity system, receiving a request to perform a task that pertains to at least one identity profile 
of an entity in said identity system, and performing a first workflow for the task, the first 
workflow associated with a first group that includes a target identity profile of the request 
wherein the first workflow comprises a predefined set of steps that perform the task to affect the 
target identity profile. 

Du is directed to "a system and method for performing flexible workflow process 
execution in a distributed workflow management system." (Col. 2, lines 59-61) Under Du "the 
distributed workflow management system is formed by a computer network comprising a 
plurality of computers." (Col. 3, lines 1-3) "A workflow process management system operates 
on one or more of the computers to control the computer network in executing the workflow 
process." (Col. 3, lines 4-7) "Each workflow process includes a sequence of activities, each of 
which is ordinarily performed by one of the computer systems." (Col. 4, lines 34-36) "The 
WFPM system provides procedural automation of the workflow process by managing the 
sequence of process activities and the invocation of appropriate user, machine or 
microprocessor-controlled device resources associated with the various activity steps." (Col. 4, 
lines 51-56) That is, Du teaches controlling distribution of processing of tasks between a number 
of computers in a network. However, Du does not teach or suggest performing a first workflow 
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for a task, the first workflow associated with a first group that includes a target identity profile 
of the request wherein the first workflow comprises a predefined set of steps that perform the 
task to affect the target identity profile. 

The cited portions of SiteMinder relate to policies and policy domains (p. 235-237 
and 325-328) and responding to requests for resources (p. 301-304). Under SiteMinder, policies, 
which may be grouped together into policy domains, control a user's access to resources. 
Resource within a policy domain, i.e., resource to which a policy domain applies, can be further 
grouped into realms. Access to the resource is controlled by rules defined for the realm that 
contains the requested resource. (See pages 235 and 325) However, the cited portions of 
SiteMinder do not teach or suggest performing a first workflow for a task, the first workflow 
associated with a first group that includes a target identity profile of the request wherein the first 
workflow comprises a predefined set of steps that perform the task to affect the target identity 
profile. In fact, the groups, i.e., the policy domains, of SiteMinder to which the policies apply 
are groups of resources, not groups of users. Thus, SiteMinder does not teach or suggest 
associating workflows with one or more groups in an identity system, each group including one 
or more users. Furthermore, SiteMinder does not teach or suggest performing a first workflow 
associated with a first group that includes a target identity profile of the request. Rather, 
SiteMinder selects policies based on the group of the requested resource. 

The combination of references are no more relevant to the pending claims than 
either reference alone since neither Du nor the cited portions of SiteMinder teach or suggest, 
alone or in combination, performing a first workflow for a task, the first workflow associated 
with a first group that includes a target identity profile of the request wherein the first workflow 
comprises a predefined set of steps that perform the task to affect the target identity profile. That 
is, neither Du nor the cited portions of SiteMinder teach or suggest, alone or in combination, 
affecting a target identity profile by performing a workflow associated with a group that contains 
the target identity profile. Rather Du teaches controlling distribution of processing of tasks 
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between a number of computers in a network while the cited portions of SiteMinder teach 
controlling user access of resources based on policies applied to groups of resources. 

Claim 1, upon which claims 2-11, 13, and 34-36 depend, claim 14, upon which 
claims 15-21 and 23 depend, and claim 24, upon which claims 25-31 and 33 depend, each recite 
in part "associating workflows with one or more groups in an identity system, each group 
including one or more users of the identity system; receiving a request to perform a task that 
pertains to at least one identity profile of an entity in said identity system; and performing a first 
workflow for said task, said first workflow is associated with a first group that includes a target 
identity profile of said request; wherein: said first workflow comprises a predefined set of steps 
that perform said task to affect the target identity profile, said predefined set of steps comprising 
a first step and a second step." Neither Du nor the cited portions of SiteMinder teach or suggest, 
alone or in combination, affecting a target identity profile by performing a workflow associated 
with a group that contains the target identity profile. Rather Du teaches controlling distribution 
of processing of tasks between a number of computers in a network while the cited portions of 
SiteMinder teach controlling user access of resources based on policies applied to groups of 
resources. For at least these reasons, claims 1-11, 13-21, 23-31, and 33-36 should be allowed. 

New claim 39, upon which new claims 40-43 depend, recites in part "associating 
workflows with one or more groups in an identity system, each group including one or more 
users of the identity system and each user of the identity system having an associated identity 
profile." As noted above, neither Du nor the cited portions of SiteMinder teach or suggest 
associating workflows with groups of users. Rather, the groups of SiteMinder to which policies 
apply are groups of resources, not users. Claim 39 further recites "receiving a request to perform 
a task that pertains to a target identity profile in the identity system." Neither Du nor the cited 
portions of SiteMinder teach or suggest, alone or in combination, performing a task that pertains 
to a target identity profile. Claim 39 also recites "identifying a set of one or more workflows that 
perform the task and are associated with groups that include the user associated with the target 
identity profile." Again, neither Du nor the cited portions of SiteMinder teach or suggest 
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identifying workflows that are associated with groups that include the target identity profile. 
Rather, the policies of SiteMinder are applied based on the requested resource, not a group to 
which the user associated with the target identity profile is associated. Furthermore, claim 39 
recites "reporting the set of one or more workflows; receiving a user selection of a first workflow 
from the set of one or more workflows; and performing one or more steps of said first workflow 
to affect the target identity profile." Neither Du nor the cited portions of SiteMinder teach or 
suggest, alone or in combination, allowing a user to select from among possible workflows. For 
at least these reasons, new claims 39-43 are also thought to be allowable. 



In view of the foregoing, Applicants believe all claims now pending in this 
application are in condition for allowance and an action to that end is respectfully requested. 

If the Examiner believes a telephone conference would expedite prosecution of 
this application, please telephone the undersigned at 303-571-4000. 

Respectfully submitted, 



TOWNSEND and TOWNSEND and CREW LLP 
Two Embarcadero Center, Eighth Floor 
San Francisco, CA 941 1 1-3834 
Tel: 303-571-4000 (Denver office) 
Fax: 303-571-4321 (Denver office) 
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